F:\PKB\INT\113H624\R-AMDT-MIN-PROCEDURES_001.XML 



[Discussion Draft] 

Amendment to H.R. 624 
Offered by M . 

Page 12, strike line 19 and all that follows through 
page 13, line 2, and insert the following: 



1 "(7) Privacy and civil liberties. — 

2 "(A) Policies and procedures. — The 

3 Director of National Intelligence, in consulta- 

4 tion with the Secretary of Homeland Security 

5 and the Attorney General, shall establish and 

6 periodically review policies and procedures gov- 

7 erning the receipt, retention, use, and disclosure 

8 of non-publicly available cyber threat informa- 

9 tion shared with the Federal Government in ac- 

10 cordance with paragraph (1). Such policies and 

11 procedures shall, consistent with the need to 

12 protect systems and networks from cyber 

13 threats and mitigate cyber threats in a timely 

14 manner — 

15 "(i) minimize the impact on privacy 

16 and civil liberties; 

17 "(ii) reasonably limit the receipt, re- 

18 tention, use, and disclosure of cyber threat 
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1 information associated with specific per- 

2 sons that is not necessary to protect sys- 

3 terns or networks from cyber threats or 

4 mitigate cyber threats in a timely manner; 

5 "(hi) include requirements to safe- 

6 guard non-publicly available cyber threat 

7 information that may be used to identify 

8 specific persons from unauthorized access 

9 or acquisition; 

10 "(iv) protect the confidentiality of 

11 cyber threat information associated with 

12 specific persons to the greatest extent 

13 practicable; and 

14 "(v) not delay or impede the flow of 

15 cyber threat information necessary to de- 

16 fend against or mitigate a cyber threat. 

17 "(B) Submission to congress. — The Di- 

18 rector of National Intelligence shall, consistent 

19 with the need to protect sources and methods, 

20 submit to Congress the policies and procedures 

21 required under subparagraph (A) and any up- 

22 dates to such policies and procedures. 



Page 26, after line 7 insert the following new sub- 
section: 
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1 (c) Privacy and Civil Liberties Policies and 

2 Procedures. — Not later than 60 days after the date of 

3 the enactment of this Act, the Director of National Intel- 

4 ligence, in consultation with the Secretary of Homeland 

5 Security and the Attorney General, shall establish the poli- 

6 cies and procedures required under section 1104(c)(7)(A) 

7 of the National Security Act of 1947, as added by sub- 

8 section (a) of this section. 
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